Security hole threatens shared Linux servers

By Patrick Gray
19 March 2003 11:10 AM
Tags: linux, kernel, server, hole, vulnerability, gray, patrick, shell
A local vulnerability has been found in the Linux kernel that allows local attackers to take full control of a targeted server.

Although the flaw is not exploitable remotely, it is sure to be of concern to administrators of shared systems, such as public shell servers and possibly some university servers, although the use of Linux shell servers in Australian universities is not yet common.

The security glitch allows low-level users of Linux-based systems with shell accounts to gain full privileges, hence totally compromising the machine.

In an e-mail posted to a kernel developer's mailing list, Linux guru Alan Cox said that although the patch provided for the security hole will affect raw functionality slightly, it is unlikely to cause any problems for administrators.

"We believe this is necessary and that it will not affect any software. The functionality change is specific to unusual debugging situations," he said.

Some hosting providers to offer shell accounts on their servers, as do some ISPs.

Advertisement

Talkback 1 comments

    What a useless article. How ab ...Anonymous -- 20/03/03

    What a useless article.

    How about some details, or at least a pointer to someone who may know something.

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • David Braue Forget the NBN, 100Mbps is already here
    Telstra and TransACT will shortly begin offering 100Mbps broadband to many customers. By moving early, the companies have not only raised the bar for Australia's broadband services, but thrown down a challenge to a government that now faces increased pressure to deliver the NBN as promised.
  • Array IT: Govt's cost-cutting bitch
    The government needs to stop looking at IT as a necessary evil or the place to remove costs when the Treasurer comes calling.
  • Array Can complaints on mobile content be cut?
    On 1 July this year the new Mobile Premium Services Code was introduced. It sounds like it's had a good impact, but is it enough?
  • More blogs »

Tags

Back to top

Featured